k7u7 Privacy Policy
At k7u7, your privacy is fundamental to everything we do. This Privacy Policy explains exactly what personal data we collect, why we collect it, how it is stored and protected, and what rights you hold as a player on our platform. We are committed to transparency and to handling your information responsibly.
Our Privacy Commitments
Six core principles that guide how k7u7 handles your personal data every single day.
SSL Encryption
All data transmitted between your device and k7u7 servers is protected by TLS 1.3 encryption. No personal information or payment data is ever sent or stored in plain text.
No Data Selling
k7u7 does not sell, rent, or trade your personal data to third-party marketers. Your information is used solely to provide and improve our gaming services to you.
Your Rights, Always
You have the right to access, correct, and request deletion of your personal data at any time. k7u7 will respond to verified data requests within 30 days of receipt.
Minimal Data Collection
We collect only the data that is strictly necessary for account creation, KYC verification, payment processing, and responsible gaming compliance. Nothing more.
Secure Storage
Personal data is stored on access-controlled servers with role-based permissions. Staff access to player data is restricted on a strict need-to-know basis and fully audited.
Marketing Opt-Out
You can opt out of promotional communications at any time through your account settings or by contacting support. Opting out does not affect your ability to use k7u7.
Overview & Scope
This Privacy Policy applies to all personal data collected, processed, and stored by k7u7 (referred to throughout this document as "k7u7", "we", "us", or "our") in connection with the operation of the k7u7 online casino and sports betting platform, accessible at k7u7.app and all associated sub-domains and mobile interfaces.
This Policy applies to all current and former registered players, individuals who have submitted a registration enquiry, visitors to the k7u7 website who have not registered an account, and any person who contacts k7u7 support. By accessing or using the k7u7 platform in any capacity, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.
k7u7 is committed to processing personal data responsibly and in accordance with applicable data protection standards. This Privacy Policy is published in English. In the event of any discrepancy between this English version and any translated summary, the English version shall prevail in all circumstances.
Scope Note: This Privacy Policy covers personal data collected directly by k7u7 through the platform registration process, KYC verification, payment processing, customer support interactions, and platform analytics. It does not govern the privacy practices of third-party game providers, payment processors, or any external website that may be linked to from time to time. Please review the privacy policies of those third parties independently.
This Privacy Policy should be read alongside k7u7's Terms & Conditions and Responsible Gaming Policy, which together constitute the complete framework governing your use of the k7u7 platform. In the event of any conflict between this Policy and a more specific data processing notice (for example, a notice presented at the time of a specific data collection activity), the more specific notice shall take precedence for that activity only.
Data We Collect
k7u7 collects personal data through several distinct channels. The categories of data we collect, and the context in which we collect them, are set out below. We collect only what is necessary for the stated purpose and do not retain data beyond the periods described in Section 6.
Registration Data
When you create a k7u7 account, we collect the following information:
- Full legal name (as it appears on your government-issued identity document).
- Date of birth (to verify that you are 18 years of age or older).
- Email address.
- Bangladeshi mobile number.
- Username and encrypted password hash.
- Preferred currency (Bangladeshi Taka, BDT ৳).
KYC & Verification Data
To comply with identity verification requirements and protect the platform against fraud, we may request:
- A copy of your National Identity Card (NID), passport, or other government-issued photo ID.
- Proof of address (utility bill, bank statement, or similar document issued within the past 90 days).
- Confirmation of payment method ownership (for example, a screenshot of your bKash or Nagad account showing your name and registered number).
- A selfie or liveness check photograph when required by our verification process.
Payment & Transaction Data
When you make a deposit or withdrawal, we record:
- Transaction reference numbers and amounts in BDT (৳).
- Payment method type (bKash, Nagad, Rocket, Upay, Visa, Mastercard).
- Mobile wallet numbers or masked card details (we never store full card numbers).
- Transaction timestamps in Bangladesh Standard Time (UTC+6).
- Transaction status (pending, completed, reversed).
Gaming Activity Data
As part of normal platform operation, k7u7 automatically logs:
- Game sessions, bet amounts, wager outcomes, and session durations.
- Bonus claims, wagering progress, and promotional offer interactions.
- Sport betting selections, odds accepted, and settlement results.
Technical & Device Data
When you access k7u7, our servers and analytics tools automatically collect:
- IP address and approximate geographic location (country/city level).
- Device type, operating system, and browser version.
- Session start and end times.
- Pages visited, features used, and click-path data.
- Cookie identifiers (see Section 5 for full cookie details).
Support & Communications Data
When you contact k7u7 support or communicate with us by any means, we retain:
- The content of your support tickets, live chat transcripts, and email correspondence.
- Timestamps and the nature of each enquiry.
- Resolution actions taken.
Sensitive Data Notice: k7u7 does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, health information, or biometric data, except to the limited extent that a government-issued identity document submitted during KYC may incidentally contain such information. Where such data is received, it is used solely for identity verification and is not processed for any other purpose.
| Data Category | Collected At | Primary Purpose |
|---|---|---|
| Registration data (name, DOB, email, mobile) | Account sign-up | Account creation, age verification, communication |
| KYC documents (NID, proof of address) | Verification stage | Identity verification, fraud prevention |
| Payment & transaction records | Deposit / withdrawal | Payment processing, financial record-keeping |
| Gaming activity logs | During gameplay | Fair play, responsible gaming monitoring, dispute resolution |
| Technical / device data | All site visits | Security, fraud detection, platform improvement |
| Support communications | When you contact us | Customer service, quality assurance |
How We Use Your Data
k7u7 processes your personal data only for specific, legitimate purposes. We do not process your data in ways that are incompatible with the purposes for which it was originally collected. The following table summarises our primary processing activities and the legal basis for each.
| Processing Purpose | Legal Basis |
|---|---|
| Creating and managing your k7u7 player account | Performance of contract |
| Verifying your identity and age (KYC) | Legal obligation / Legitimate interest |
| Processing deposits and withdrawals | Performance of contract |
| Preventing fraud, money laundering, and account abuse | Legal obligation / Legitimate interest |
| Delivering and improving platform features and games | Legitimate interest |
| Responsible gaming monitoring and player protection | Legal obligation / Legitimate interest |
| Sending transactional communications (account alerts, withdrawal confirmations) | Performance of contract |
| Sending promotional communications (bonus offers, seasonal promotions) | Consent (opt-in) |
| Analysing platform usage and user behaviour (analytics) | Legitimate interest |
| Resolving player disputes and support enquiries | Performance of contract / Legal obligation |
Automated Decision-Making
k7u7 uses automated systems to detect patterns of potentially fraudulent activity, multi-accounting, and bonus abuse. These systems may trigger account flags or temporary suspensions without human review as an immediate protective measure. Where an automated decision has a significant impact on your account (for example, a permanent account closure), you have the right to request human review of that decision by contacting [email protected].
Profiling
k7u7 may analyse your gaming activity, deposit patterns, and platform engagement to personalise the offers and promotions presented to you. This profiling is carried out on the basis of legitimate interest and is aimed at delivering relevant content. You may object to profiling for marketing purposes at any time by contacting our support team.
Marketing Communications: If you have opted in to receive promotional emails or SMS messages from k7u7, you may withdraw that consent at any time by clicking the unsubscribe link in any marketing email, updating your preferences in your account settings, or contacting [email protected]. Withdrawal of marketing consent does not affect your ability to use the k7u7 platform or receive essential transactional communications.
Data Sharing & Disclosure
k7u7 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.
Service Providers & Processors
k7u7 works with a limited number of trusted third-party service providers who process data on our behalf under contractual data processing agreements. These include:
- Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive transaction data necessary to process your deposits and withdrawals. Each payment provider operates under its own privacy policy and applicable financial services regulations.
- KYC and identity verification partners: Where k7u7 uses a third-party identity verification service to assist with document checks, your submitted KYC documents are shared with that provider solely for verification purposes.
- Cloud infrastructure providers: k7u7's servers and databases are hosted on cloud infrastructure. The hosting provider may have access to encrypted data as part of infrastructure management, but does not process player data for its own purposes.
- Analytics providers: Anonymised or pseudonymised usage data may be shared with analytics platforms to support platform performance monitoring and improvement.
- Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified game studios receive the minimum technical data necessary to deliver their game content within the k7u7 platform. See Section 9 for further detail.
Legal & Regulatory Disclosure
k7u7 may disclose your personal data to law enforcement, regulatory authorities, or other third parties when required to do so by applicable law, court order, or regulatory requirement. In such cases, k7u7 will disclose only the minimum data necessary to satisfy the legal obligation and will, where legally permitted, notify you that such a disclosure has been made.
Business Transfers
In the event that k7u7 undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change to the way your data is processed as a result.
No Cross-Border Transfers Without Safeguards: If any of k7u7's service providers are located outside Bangladesh, k7u7 will ensure that appropriate safeguards are in place before transferring your personal data internationally. These safeguards may include contractual data protection clauses or the equivalent of standard contractual clauses recognised under applicable data protection frameworks.
Data Retention
k7u7 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention schedule applies:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Legal and regulatory compliance |
| KYC documents | Duration of account + 5 years after closure | Anti-money laundering obligations |
| Transaction records | 7 years from transaction date | Financial record-keeping requirements |
| Gaming activity logs | 3 years from activity date | Dispute resolution, responsible gaming audit |
| Support communications | 3 years from date of last interaction | Customer service quality, dispute evidence |
| Analytics / technical data | Up to 24 months (anonymised after 12 months) | Platform performance analysis |
| Marketing consent records | Until consent is withdrawn + 1 year | Evidence of consent |
When the applicable retention period expires, personal data is securely deleted or anonymised in a manner that makes re-identification impossible. Where data is anonymised rather than deleted, the anonymised dataset may be retained indefinitely for statistical and analytical purposes.
Self-Exclusion Records: If you request self-exclusion from k7u7, a record of your self-exclusion is retained for the full duration of the exclusion period and for a minimum of 5 years thereafter. This is necessary to prevent the inadvertent reactivation of your account and to protect your responsible gaming status.
Data Security
k7u7 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security programme includes the following controls:
- TLS 1.3 encryption in transit: All data transmitted between your device and k7u7 servers is encrypted using TLS 1.3. You can verify this by checking for the padlock icon in your browser's address bar when accessing k7u7.app.
- Encryption at rest: Sensitive data fields (including KYC document files, payment details, and password hashes) are encrypted at the database level using AES-256 or equivalent standards.
- Password hashing: Passwords are never stored in plain text. They are hashed using a modern, salted cryptographic hashing algorithm (bcrypt or equivalent) before storage.
- Access controls: Access to player data within k7u7's internal systems is restricted on a role-based, need-to-know basis. All internal access to personal data is logged and audited.
- Intrusion detection: k7u7's infrastructure is monitored continuously for anomalous activity, unauthorised access attempts, and potential security incidents.
- Regular security reviews: k7u7 conducts periodic security assessments and vulnerability reviews to identify and remediate weaknesses in platform security.
Security Breach Response
In the event of a personal data breach that poses a risk to your rights and freedoms, k7u7 will notify affected players by email to their registered address within a reasonable timeframe of becoming aware of the breach. The notification will describe the nature of the breach, the categories of data affected, the steps k7u7 is taking to address it, and any actions you are advised to take to protect yourself.
Your Responsibility
While k7u7 takes strong measures to protect your data, the security of your account also depends on you. You are responsible for keeping your k7u7 login credentials confidential, using a strong and unique password, and logging out from shared devices. If you suspect unauthorised access to your account, contact [email protected] immediately.
Your Privacy Rights
As a k7u7 player, you hold a number of rights in respect of your personal data. k7u7 is committed to honouring these rights and to responding to verified requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case you will be notified of the extension and the reason for it.
- Right of access: You have the right to request a copy of the personal data k7u7 holds about you, together with information about how it is being processed. This is sometimes called a Subject Access Request (SAR).
- Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update many details directly through your account settings; for others, contact support.
- Right to erasure ("right to be forgotten"): You may request that k7u7 delete your personal data. This right is not absolute — k7u7 may be required to retain certain data by law (for example, transaction records for financial compliance). Where erasure is not possible, we will explain why and what data must be retained.
- Right to restrict processing: In certain circumstances (for example, where you contest the accuracy of your data), you may request that k7u7 restrict the processing of your personal data to storage only while the matter is resolved.
- Right to data portability: Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to have it transmitted to another data controller where technically feasible.
- Right to object: You have the right to object to processing carried out on the basis of legitimate interest, including profiling for marketing purposes. Where you object, k7u7 will cease the relevant processing unless compelling legitimate grounds exist that override your interests.
- Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
- Rights related to automated decision-making: You have the right not to be subject to a decision based solely on automated processing that produces significant legal or similarly significant effects, and to request human review of any such decision.
How to Exercise Your Rights: To submit a data rights request, email [email protected] with the subject line "Data Rights Request" and a description of the right you wish to exercise. k7u7 may need to verify your identity before processing the request to ensure that your data is not disclosed to an unauthorised party. Verified requests will be acknowledged within 5 business days and responded to within 30 calendar days.
Third-Party Game Providers
k7u7 partners with a number of certified third-party game studios and sports data providers to deliver its full library of casino games, live dealer tables, and sports betting markets. These providers include Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others. When you play a game or access a live dealer table powered by one of these studios, a limited set of technical data is transmitted to that provider in order to render the game correctly and record the outcome.
The data shared with third-party game providers is typically limited to:
- An anonymised or pseudonymised player session token (not your full name or email address).
- Bet amounts, wager outcomes, and game round identifiers — required for game settlement and dispute resolution.
- Your account balance as relevant to the game session.
- Device type and browser version, for rendering optimisation.
Each third-party game provider operates under its own privacy policy and is independently certified for fair play and data protection by recognised gaming testing laboratories. k7u7 does not control the data practices of these providers beyond the scope of our data processing agreements with them. We encourage you to review the privacy documentation of any game provider whose content you regularly use.
Payment Partners
When you initiate a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, you are interacting with that payment provider's infrastructure. The data you submit during a payment transaction is processed by the respective payment provider in accordance with their own privacy policy and terms of service. k7u7 receives only a transaction confirmation and reference number — we do not receive or store your full mobile banking PIN, OTP, or complete card number.
External Links Disclaimer: The k7u7 platform may from time to time display information about or references to third-party services. k7u7 is not responsible for the privacy practices of any third-party website or service. This Privacy Policy applies solely to data collected and processed by k7u7 directly.
Policy Updates & Contact
k7u7 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing activities, applicable legal requirements, or platform features. When we make material changes to this Policy, we will:
- Update the "Last Updated" date at the top of this page.
- Post a notice on the k7u7 platform homepage or within your account dashboard.
- Where the changes are significant, send a notification to your registered email address.
Your continued use of the k7u7 platform following the publication of an updated Privacy Policy constitutes your acceptance of the changes. If you do not agree to the updated Policy, you should cease using the platform and contact support to request account closure.
We recommend that you review this Privacy Policy periodically — at minimum whenever you receive a notification of changes — to stay informed about how k7u7 handles your personal data. Previous versions of this Policy are available upon request by contacting [email protected].
Contact Our Privacy Team
If you have any questions, concerns, or requests relating to this Privacy Policy or to k7u7's handling of your personal data, please contact our privacy team using the details below. We are committed to resolving privacy enquiries promptly and transparently.
Privacy Enquiries: Email our team at [email protected] with the subject line "Privacy Enquiry". We aim to acknowledge all privacy-related contacts within 2 business days and to provide a full response within 30 calendar days. For urgent matters relating to a suspected data breach or unauthorised account access, please use the same email address and mark your message as urgent.
Mailing Address: k7u7 Privacy Team, k7u7.app — correspondence accepted via email only. Please do not send physical documents unless specifically requested by our team.
k7u7 takes all privacy complaints seriously. If you are not satisfied with the outcome of your complaint after contacting us directly, you may wish to seek advice from an independent data protection authority or legal adviser in Bangladesh.
Ready to Experience k7u7?
Now that you understand how we protect your data, explore our full range of games and betting markets — all secured with SSL encryption and designed for Bangladeshi players.
18+ only. Please gamble responsibly. All data protected per this Privacy Policy.